Danger Will Robinson - Danger!!

[VA Gina]

JUN. 18 6:09 A.M. ET

A computer hacker may have accessed more than 40 million credit card accounts in what could be the largest in a series of recent security breaches involving consumer data, officials said.

MasterCard International Inc. announced Friday that the breach was traced to Atlanta-based CardSystems Solutions Inc., which processes credit card and other payments for banks and merchants. All brands of credit cards could be affected.

The compromised data did not include addresses or Social Security numbers, said MasterCard spokeswoman Sharon Gamsin. The data that may have been viewed -- names, banks and account numbers -- could be used to steal funds, but not identities.

complete report here

[plumcrazy]

OUCH...that'll leave a mark

[GreenSnake]

I know most of the reading and listening public probably doesn’t care, but as a techie of sorts I would love to know what OS platforms these servers are running that are being hacked into? Got WinDoze?

[VA Gina]

this is nothing definitive but from what i read - the breach took place at the Tucson office of CardSystems Solutions - and a quick lookup for their domain returned - cardsystems.com - and taking that info to - http://web-sniffer.net - returned an IIS server using ASP.NET

HTTP Request Header

Connect to 63.83.95.71 on port 80 ... ok

GET / HTTP/1.1[CRLF]
Host: www.cardsystems.com[CRLF]
Connection: close[CRLF]
Accept-Encoding: gzip[CRLF]
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5[CRLF]
Accept-Language: en-us,en;q=0.5[CRLF]
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7[CRLF]
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0 Web-Sniffer/1.0.20[CRLF]
Referer: http://web-sniffer.net/[CRLF]
[CRLF]

HTTP Response Header
Name Value Delim
HTTP Status Code: HTTP/1.1 200 OK
Server: Microsoft-IIS/5.0 CRLF
X-Powered-By: ASP.NET CRLF
Connection: close CRLF
Content-Location: http://www.cardsystems.com/index.html CRLF
Date: Sun, 19 Jun 2005 00:30:41 GMT CRLF
Content-Type: text/html CRLF
Accept-Ranges: bytes CRLF
Last-Modified: Wed, 16 Mar 2005 18:40:00 GMT CRLF
ETag: "04068f572ac51:9b8" CRLF
Content-Length: 12678 CRLF